Transparency · Preferences
Cookie Policy
Information about cookies and other tracking technologies used by www.castellodellaspizzichina.it.
Version 1.0Last updated: 13 August 2026Technical scan: 13 August 2026
1. Data Controller
The Data Controller is F & B GROUP S.R.L., registered office at Via Riccardo Moretti 6, 00123 Rome (RM), Italy; Italian VAT number and tax code 10641631006; Rome REA Economic and Administrative Index no. RM-1246201; certified email (PEC) febgroupsrl@pec.it. Email: amministrazione@castellodellaspizzichina.it. For general information about personal data processing, please see the Privacy Policy.
2. What cookies and trackers are
Cookies are small text strings that a website or third party stores on a user’s device and may read during later visits. Technologies such as pixels, tags, local storage, SDKs and online identifiers may perform comparable functions. Cookies may be session-based or persistent, and may be set by the website itself or by a third party.
Some technologies are essential to transmit communications or provide a function requested by the user. Others measure use of the website, provide external content or enable advertising activities and generally require prior user choice.
3. Legal bases
Strictly necessary cookies are used under Article 122(1) of Italian Legislative Decree 196/2003 and do not require consent. Analytics cookies that cannot be treated as technical cookies, non-essential functionality cookies, targeting cookies and profiling technologies are activated only after consent under Articles 4(11), 6(1)(a) and 7 GDPR and Article 122 of the Italian Privacy Code.
Consent is optional, granular, demonstrable and as easy to withdraw as it is to give. Refusing consent does not prevent access to essential content. Continuing to browse or scrolling does not constitute consent.
4. Categories used
- Strictly necessary: store consent preferences, protect the service, and manage session and security functions.
- Performance: produce statistics about use of the website through Google Analytics. They remain disabled until the relevant choice has been made where they cannot be treated as technical cookies.
- Targeting: measure campaigns and may link visits to advertising activity through Google and Meta.
- Functionality: provide advanced features and external content, including the Vimeo player.
5. Cookies detected
The following table reflects the public scan available on 13 August 2026. Durations are indicative maximum periods and may be shortened by the user, browser or provider.
| Name | Provider / domain | Purpose | Category | Detected duration |
|---|---|---|---|---|
CookieScriptConsent |
Cookie-Script / castellodellaspizzichina.it | Stores the preferences selected through the consent banner. | Strictly necessary | 4 weeks and 2 days |
__cf_bm |
Cloudflare / vimeo.com | Distinguishes human from automated traffic and protects the video player. | Strictly necessary | Approximately 30 minutes |
_ga |
Google / castellodellaspizzichina.it | Distinguishes users and visits for Google Analytics statistics. | Performance | 1 year and 1 month |
_ga_K87E6HXMC5 |
Google / castellodellaspizzichina.it | Maintains Analytics session state. | Performance | 1 year and 1 month |
_gcl_au |
Google / castellodellaspizzichina.it | Measures conversions and interactions with advertising campaigns. | Targeting | 3 months |
[32-character session identifier] |
Castello della Spizzichina | CMS session continuity and security. | Functionality / necessary according to actual use | Session |
_cfuvid |
Cloudflare / vimeo.com and challenges.cloudflare.com | Session management, security and traffic control. | Functionality / security | Session |
Other cookies or identifiers may appear depending on browser, device, geographical area, videos played and active campaigns. In particular, Meta Pixel, Google identifiers G-NNSVLRV9Z2 and G-K87E6HXMC5, and container GTM-TMWD4ZX6 are present on the website and must remain subject to the categories selected by the user.
6. Services and third parties
Cookie-Script
Cookie-Script manages the consent banner, user preferences and records of those choices. Its technical operation is necessary for consent management.
Google Analytics, Tag Manager and advertising
Google Analytics measures visits and interactions, Tag Manager manages tags, and advertising tools may measure conversions and campaigns. Non-essential use takes place after consent and must be configured with Consent Mode v2 set to denied by default.
Meta Pixel, Facebook, Instagram and WhatsApp
Meta Pixel may measure actions, attribute campaigns and create audiences. Links to Facebook, Instagram and WhatsApp transmit data to Meta when the user opens them; the destination app or website applies its own terms and privacy notice.
Vimeo
The website embeds videos through the Vimeo player. Loading the player may disclose IP address, user agent and technical data to Vimeo and Cloudflare. The non-essential player should be blocked or replaced with a local preview until the user selects the relevant category.
Provider privacy notices: Google, Meta, Vimeo, Cookie-Script.
7. Managing or withdrawing your choices
On the first visit, the banner allows users to accept all cookies, reject all cookies or choose by category, without preselected options for non-essential technologies. Preferences can be changed at any time by reopening the Cookie-Script panel through the permanent “Cookie settings” control or icon made available on the website.
Withdrawal does not affect the lawfulness of processing carried out before it. After withdrawal, non-essential tags will no longer be activated. Cookies already stored may be removed through the browser or, where technically supported, through the consent platform.
8. Browser controls
You may block or delete cookies through Safari, Chrome, Firefox, Edge or the browser you use. Blocking all technical cookies may impair some functions. Browser settings do not replace the website’s preference panel but provide additional device-level control.
You may also limit advertising personalisation through your Google and Meta account settings and your device preferences. This does not replace withdrawal of consent on this website.
9. International transfers
Google, Meta, Vimeo and Cookie-Script may process data outside the European Economic Area. Transfers rely on adequacy decisions, the EU–US Data Privacy Framework for validly certified recipients, Standard Contractual Clauses or another safeguard under Articles 44–49 GDPR. Further details are available in the Privacy Policy and provider notices.
10. Your rights
You may exercise the rights set out in Articles 15–22 GDPR and lodge a complaint with the Italian Data Protection Authority. Requests may be sent to amministrazione@castellodellaspizzichina.it.
11. Updates
This Cookie Policy will be updated whenever technologies, providers, purposes or retention periods change. The table should be checked through a fresh scan after any change to Joomla/Gridbox, Google Tag Manager, Google or Meta campaigns, the video player or the consent platform.
